For more information regarding dotCMS security polices and known security issues see our documentation site: https://dotcms.com/docs/latest/security-and-privacy
dotCMS is commited to backporting security fixes to our LTS version. For an up to date list of which versions are supported, please see: https://www.dotcms.com/docs/latest/current-releases
When possible, dotCMS will also provide a workaround that can remediate a security issue without having to update you dotCMS version.
Please see our responsible disclosure policy here: https://dotcms.com/docs/latest/responsible-disclosure-policy